Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Holder Binding definition dilemma #26

Open
OIDF-automation opened this issue Apr 21, 2023 · 2 comments · May be fixed by #457
Open

Holder Binding definition dilemma #26

OIDF-automation opened this issue Apr 21, 2023 · 2 comments · May be fixed by #457
Assignees
@javereec
Labels
clarification ready-for-PR terminology
Milestone
1.1

Comments

@OIDF-automation
Copy link
Contributor

Imported from AB/Connect bitbucket: https://bitbucket.org/openid/connect/issues/1914

Original Reporter: peppelinux

Dear friends and authors, I read in the OpenID4VCI specs the definition of Holder Binding as follows

”Holder Binding: Ability of the Holder to prove legitimate possession of a Verifiable Credential.”

I assume that the statement above refers to the Proof of Possession, carried out by the Holder during the presentation stage, as an ability of the Holder of doing that.

Differently, thinking about Holder Binding, the following definition comes to mind

"characteristic or attribute of a credential, inseparable from it and resistant to tampering, which uniquely links a Verifiable Credential to the entity who requested it and of which it is the legitimate Holder"
@OIDF-automation
Copy link
Contributor Author

Imported from AB/Connect bitbucket - Original Commenter: KristinaYasuda

I am starting to think that biometrics-based holder binding is separate from cryptographic and claim-based holder binding. With biometrics-based, there is an element of authentication, and “binding” to a physical huma being that is actually using the wallet SW. while in the latter two, verifier can only know that there is only binding to something stored suing wallet SW…

I think I am also saying that when biometrics-based holder binding is used authentication event (ie ID Token) should be returned

@Sakurann
Copy link
Collaborator

I would suggest changing a term Holder binding to key binding, like SD-JWT did here and define it as the following:

Ability of the Holder to prove legitimate possession of a Credential by proving control over the same private key during the issuance and presentation. A Credential with Key Binding contains a public key, or a reference to a public key, that matches to the private key controlled by the Holder.

@Sakurann Sakurann added this to the 1.1 milestone Jan 22, 2025
@javereec javereec linked a pull request Feb 3, 2025 that will close this issue
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@javereec javereec

Labels
clarification ready-for-PR terminology
Projects
None yet
Milestone
1.1
Development

Successfully merging a pull request may close this issue.

Change Cryptographic Holder Binding to Cryptographic Key Binding javereec/OpenID4VCI
3 participants
@javereec @Sakurann @OIDF-automation